AWS Certified Cloud Practitioner – Foundational

(CLF-C01) Sample Exam Questions

1) Why is AWS more economical than traditional data centers for applications with varying compute
workloads?

A) Amazon Elastic Compute Cloud (Amazon EC2) costs are billed on a monthly basis.
B) Customers retain full administrative access to their Amazon EC2 instances.
C) Amazon EC2 instances can be launched on-demand when needed.
D) Customers can permanently run enough instances to handle peak workloads.

2) Which AWS service would simplify migration of a database to AWS?

A) AWS Storage Gateway

B) AWS Database Migration Service (AWS DMS)
C) Amazon Elastic Compute Cloud (Amazon EC2)
D) Amazon AppStream 2.0

3) Which AWS offering enables customers to find, buy, and immediately start using software solutions in
their AWS environment?

A) AWS Config
B) AWS OpsWorks
C) AWS SDK
D) AWS Marketplace

4) Which AWS networking service enables a company to create a virtual network within AWS?

A) AWS Config
B) Amazon Route 53
C) AWS Direct Connect
D) Amazon Virtual Private Cloud (Amazon VPC)

5) Which of the following is AWS's responsibility under the AWS shared responsibility model?

A) Configuring third-party applications

B) Maintaining physical hardware
C) Securing application access and data
D) Managing custom Amazon Machine Images (AMIs)

6) Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-latency
delivery?

A) AWS Regions
B) AWS edge locations
C) AWS Availability Zones
D) Amazon Virtual Private Cloud (Amazon VPC)

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved | aws.amazon.com 1
 AWS Certified Cloud Practitioner – Foundational
(CLF-C01) Sample Exam Questions

7) How would a system administrator add an additional layer of login security to a user's AWS
Management Console?

A) Use AWS Cloud Directory

B) Audit AWS Identity and Access Management (IAM) roles
C) Enable Multi-Factor Authentication
D) Enable AWS CloudTrail

8) Which service can identify the user that made the API call when an Amazon Elastic Compute Cloud
(Amazon EC2) instance is terminated?

A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS X-Ray
D) AWS Identity and Access Management (AWS IAM)

9) Which service would you use to send alerts based on Amazon CloudWatch alarms?

A) Amazon Simple Notification Service (Amazon SNS)

B) AWS CloudTrail
C) AWS Trusted Advisor
D) Amazon Route 53

10) Where can a customer find information about prohibited actions on AWS infrastructure?

A) AWS Trusted Advisor

B) AWS Identity and Access Management (IAM)
C) AWS Billing Console
D) AWS Acceptable Use Policy

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved | aws.amazon.com 2
 AWS Certified Cloud Practitioner – Foundational
(CLF-C01) Sample Exam Questions
Answers
1) C – The ability to launch instances on-demand when needed allows customers launch and terminate instances
in response to a varying workload. This is a more economical practice than purchasing enough on-premises
servers to handle the peak load.

2) B - https://aws.amazon.com/dms/

3) D - https://aws.amazon.com/mp/

4) D - https://aws.amazon.com/vpc/

5) B - https://aws.amazon.com/compliance/shared-responsibility-model/

6) B - https://aws.amazon.com/cloudfront/

7) C - https://aws.amazon.com/iam/details/mfa/

8) B - http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html

9) A - http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html

10) D - https://aws.amazon.com/aup/

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved | aws.amazon.com 3